---
title: "Managing a FortiGate account"
sidebar_label: "Managing an account"
sidebar_position: 10
description: "How to create an administrator account, how to rename an account, how to change a password, how to configure lockout"
---

import Formbricks from '@theme/MDXComponents/Formbricks';
import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';
import { TabItemLabel } from '@selectel/docux/components';
import CreateAdministratorAccount from '@site/i18n/en/docusaurus-plugin-content-docs/current/_partials/firewalls/fortigate/create-administrator-account.mdx';

# Managing a FortiGate account

The settings in this guide are relevant for FortiOS 6.x and 7.x versions. If you are using a different FortiOS version, you can find the documentation for it in the FortiGate control panel in the top-right corner or on the [official FortiGate website](https://docs.fortinet.com).

## Create an administrator account \{#create-administrator-account}

<Tabs queryString="create-administrator-account">
  <TabItem value="graphic" default>
    <TabItemLabel>
      Graphical interface
    </TabItemLabel>

    1. [Connect to the firewall](firewalls/fortigate/connect-to-firewall.mdx).
    2. In the FortiGate control panel, go to **System** → **Administrators**.
    3. Click **Create new** → **System administrator**.
    4. Specify the username and password that the administrator will use to connect to the firewall.
    5. Select a profile. A profile is an administrator role with access to firewall settings. By default, the `super_admin` profile is available with full access to settings. You can create a new profile in the **System** → **Admin Profiles**.
    6. Click **OK**.
  </TabItem>

  <TabItem value="cli">
    <TabItemLabel>
      CLI
    </TabItemLabel>

    1. [Connect to the firewall](firewalls/fortigate/connect-to-firewall.mdx).
    2. Create an administrator account:

       <CreateAdministratorAccount />
  </TabItem>
</Tabs>

## Change administrator account password \{#change-administrator-account-password}

<Tabs queryString="change-administrator-account-password">
  <TabItem value="graphic" default>
    <TabItemLabel>
      Graphical interface
    </TabItemLabel>

    1. [Connect to the firewall](firewalls/fortigate/connect-to-firewall.mdx).
    2. In the FortiGate control panel, go to **System** → **Administrators**.
    3. Select the administrator username from the list.
    4. Switch to edit mode.
    5. Select **Change password**.
    6. Enter the old password.
    7. Enter the new password.
    8. Repeat the new password.
    9. Click **OK**.
  </TabItem>

  <TabItem value="cli">
    <TabItemLabel>
      CLI
    </TabItemLabel>

    1. [Connect to the firewall](firewalls/fortigate/connect-to-firewall.mdx).
    2. Change the administrator account password:

       ```bash
       config system admin
           edit <username>
             set password <new_password>
       end
       ```

       Specify:

       * `<username>` — administrator username;
       * `<new_password>` — new administrator password.
  </TabItem>
</Tabs>

## Configure account lockout \{#configure-account-lockout}

By default, the account is locked for 60 seconds after three password entry attempts. You can change the number of password entry attempts and the timeout before the next attempt.

<Tabs queryString="configure-account-lockout">
  <TabItem value="cli" default>
    <TabItemLabel>
      CLI
    </TabItemLabel>

    1. [Connect to the firewall](firewalls/fortigate/connect-to-firewall.mdx).
    2. Configure the number of password retry attempts and the timeout duration:

       ```bash
       config system global
           set admin-lockout-threshold <admin_lockout_threshold>
           set admin-lockout-duration <admin_lockout_duration>
       end
       ```

       Specify:

       * `<admin_lockout_threshold>` — number of password retry attempts. Three attempts are set by default. You can specify a value from 1 to 10;
       * `<admin_lockout_duration>` — timeout duration in seconds, after which you can try entering the password again. 60 seconds is set by default. You can specify a value from 1 to 4294967295.
  </TabItem>
</Tabs>

## Rename an account \{#rename-account}

<Tabs queryString="rename-account">
  <TabItem value="graphic" default>
    <TabItemLabel>
      Graphical interface
    </TabItemLabel>

    You cannot rename the account you are currently using to connect to the firewall.

    1. [Connect to the firewall](firewalls/fortigate/connect-to-firewall.mdx) using an account with the `super_admin` profile or another profile with access to the **System**.
    2. In the FortiGate control panel, go to **System** → **Administrators**.
    3. Select the administrator username from the list.
    4. Switch to edit mode.
    5. Change the administrator username.
    6. Click **OK**.
  </TabItem>
</Tabs>

<Formbricks />